Information Security Specialist Apexon at Remote, Remote, USA |
Email: [email protected] |
From: Angel, Concorditsystems [email protected] Reply to: [email protected] Information Security Specialist Home-based (Arizona) 6 + Months Long Term Mid Level only open now CLIENT-APEXON Fully remote - Single video interview with me to determine that the contractor is a good match for the position. Candidate should come prepared to answer high level information security related technical questions. Description: Coordinate with business stakeholders to initiate, scope and plan controls assessments of new and existing 3rd parties. Perform assessments remotely via conference calls and occasionally at vendor sites. Obtain and review 3rd party documentation and other evidence to validate appropriate implementation of information security controls. Analyze the information to identify information security weaknesses or non-compliance with client standards. Produce detailed documentation of assessments and perform threat analyses of gaps identified. Communicate 3rd party information security issues to stakeholders, ensuring their understanding of associated risks and actions needed to remediate those risks. Manage assessment findings and track findings through remediation. Qualifications: 5+ years experience in a similar Assessor, Auditor, or other related Information Security role. Demonstrated in-depth knowledge of concepts, best practices and controls in a breadth of information security areas/domains. These information security areas include governance & risk management, access control, cryptography, physical security, security architecture and design, network security, application & operations security and compliance/incident management. Self-starter with the ability to manage and prioritize responsibilities through the effective use of time management techniques. Self-driven performer with established skills in tracking self and project performance, anticipating and recognizing problems and escalating issues appropriately. Strong ability to interact and communicate both written and verbally with people at all levels, both technical and non-technical, in a dynamic environment where interactions are not in person. Strong risk analysis and problem-solving skills. Must be flexible to ensure assessments are performed by the mandated compliance date and be able to manage multiple assessments simultaneously. Education: Bachelors Degree (in Technology, Information Security or related major), or equivalent work experience. Keywords: |
[email protected] View all |
Wed Feb 08 22:15:00 UTC 2023 |